Packet Flow (Pod-to-Pod, Different Nodes)

Packet Flow (Pod-to-Pod, Different Nodes) A sequence diagram generated by Archify. send packet (dst: Pod B) egress policy check + route lookup encapsulate (outer IP: Node 2) tunnel transmit decapsulated on Node 2 direct forward (BGP route) deliver packet delivered after ingress policy check IPIP/VXLAN mode — encapsulate, then send over the tunnel Direct mode — forward via BGP route Pod A · Node 1 · veth · Sequence participant Pod A Node 1 · veth Felix/iptables · Node 1 · Sequence participant Felix/iptables Node 1 IPIP/VXLAN · Tunnel (physical network) · Sequence participant IPIP/VXLAN Tunnel (physical network) Felix/iptables · Node 2 · Sequence participant Felix/iptables Node 2 Pod B · Node 2 · veth · Sequence participant Pod B Node 2 · veth Legend delivery path Direct mode (BGP) encap · tunnel transmit